CVE-2018-12088

S3QL before 2.27 mishandles checksumming, and consequently allows replay attacks in which an attacker who controls the backend can present old versions of the filesystem metadata database as up-to-date, temporarily inject zero-valued bytes into files, or temporarily hide parts of files. This is...

DEBIAN-CVE-2018-12088

S3QL before 2.27 mishandles checksumming, and consequently allows replay attacks in which an attacker who controls the backend can present old versions of the filesystem metadata database as up-to-date, temporarily inject zero-valued bytes into files, or temporarily hide parts of files. This is...

UBUNTU-CVE-2018-12088

S3QL before 2.27 mishandles checksumming, and consequently allows replay attacks in which an attacker who controls the backend can present old versions of the filesystem metadata database as up-to-date, temporarily inject zero-valued bytes into files, or temporarily hide parts of files. This is...

PT-2018-11001

Name of the Vulnerable Software and Affected Versions S3QL versions prior to 2.27 Description The issue is related to mishandling of checksumming, allowing replay attacks. An attacker controlling the backend can present old versions of the filesystem metadata database as up-to-date, inject...

Threat Outbreak Alert RuleID32912: Email Messages Distributing Malicious Software on June 7, 2018

Medium Alert ID: 58062 First Published: 2018 June 7 20:49 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32912 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID32926: Email Messages Distributing Malicious Software on June 7, 2018

Medium Alert ID: 58068 First Published: 2018 June 7 20:49 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32926 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID32881: Email Messages Distributing Malicious Software on June 7, 2018

Medium Alert ID: 58030 First Published: 2018 June 7 16:31 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32881 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID32888: Email Messages Distributing Malicious Software on June 7, 2018

Medium Alert ID: 58034 First Published: 2018 June 7 16:16 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32888 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID32885: Email Messages Distributing Malicious Software on June 7, 2018

Medium Alert ID: 58033 First Published: 2018 June 7 16:16 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32885 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID32874: Email Messages Distributing Malicious Software on June 5, 2018

Medium Alert ID: 58014 First Published: 2018 June 5 19:40 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32874 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID32865: Email Messages Distributing Malicious Software on June 1, 2018

Medium Alert ID: 57997 First Published: 2018 June 1 18:50 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32865 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID32860: Email Messages Distributing Malicious Software on June 1, 2018

Medium Alert ID: 57995 First Published: 2018 June 1 18:50 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32860 may contain the following files: Name | Size...

Quest KACE System Management Appliance Path Traversal Vulnerability

Quest KACE System Management Appliance is an IT asset management appliance from Quest Software, USA. A path traversal vulnerability exists in Quest KACE System Management Appliance version 8.0.318. The vulnerability can be exploited to read arbitrary files via the 'checksum' parameter in the...

CVE-2018-11137

The 'checksum' parameter of the '/common/downloadattachment.php' script in the Quest KACE System Management Appliance 8.0.318 can be abused to read arbitrary files with 'www' privileges via Directory Traversal. No administrator privileges are needed to execute this script...

Threat Outbreak Alert RuleID32858: Email Messages Distributing Malicious Software on May 31, 2018

Medium Alert ID: 57988 First Published: 2018 May 31 15:14 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32858 may contain the following files: Name | Size...

CVE-2018-11137: Improper Limitation of a Pathname to a Restricted Directory

The 'checksum' parameter of the '/common/downloadattachment.php' script in the Quest KACE System Management Appliance 8.0.318 can be abused to read arbitrary files with 'www' privileges via Directory Traversal. No administrator privileges are needed to execute this script...

PT-2018-10328

Name of the Vulnerable Software and Affected Versions Quest KACE System Management Appliance version 8.0.318 Description The issue allows for the reading of arbitrary files with 'www' privileges via Directory Traversal in the '/common/download attachment.php' script. This can be achieved by abusi...

Threat Outbreak Alert RuleID32838: Email Messages Distributing Malicious Software on May 25, 2018

Medium Alert ID: 57967 First Published: 2018 May 25 18:52 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32838 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID32835: Email Messages Distributing Malicious Software on May 24, 2018

Medium Alert ID: 57962 First Published: 2018 May 24 20:27 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32835 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID32821: Email Messages Distributing Malicious Software on May 23, 2018

Medium Alert ID: 57947 First Published: 2018 May 23 17:15 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32821 may contain the following files: Name | Size...